HackingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICLowContained
CLAS Information Services
bd_ac0fa79f5a389ae2 · schema v1 · pii pii-v1
Full breach record for CLAS Information Services →CLAS Information Services notified the New Hampshire Attorney General of a data security incident discovered on October 18, 2024. Unauthorized access to documents containing personal information was determined in January 2025. One New Hampshire resident was affected. CLAS engaged cybersecurity experts and notified the affected individual on April 30, 2025.
Leak gap clock✗ Leak >180d28 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
A leak claim by bianlian about this victim predates this filing by 210 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_51e55f61b039297aLeak Sitebianlianfiled 2024-10-29(187d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_a45dc4c5065afbd2Vermont State AGfiled 2025-05-06(1d gap)Verified
- bd_b45b38198e553975Indiana State AGfiled 2025-04-30(5d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/clas-information-20250505.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 5, 2025
- Raw hash
- b52405d9cc38a274f035ff0678da62a248b397db012625e1258cb5730bae86b7
Reporting entity
- Name
- CLAS Information Servicesnorm: clas information
- Domain
- clasinfo.com
Victim entity
- Name
- CLAS Information Servicesnorm: clas information
- Domain
- clasinfo.com
Incident
- Discovered
- Oct 18, 2024
- Materiality determined
- Mar 31, 2025
- Notification sent
- Apr 30, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 28 weeks(199 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.